Complete sets of cyclic mutually unbiased bases in even prime power dimensions 
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We present a construction method for complete sets of cyclic mutually unbiased bases (MUBs) 
in Hilbert spaces of even prime power dimensions. In comparison to usual complete sets of MUBs, 
complete cyclic sets possess the additional property of being generated by a single unitary operator. 
The construction method is based on the idea of obtaining a partition of multi-qubit Pauli operators 
into maximal commuting sets of orthogonal operators with the help of a suitable element of the 
Clifford group. As a consequence, we explicitly obtain complete sets of cyclic MUBs generated by 
a single element of the Clifford group in dimensions 2™ for m = 1, 2, . . . , 24. 



I. INTRODUCTION 

One of the basic features of quantum mechanics is that 
there exist physical observables which cannot be mea- 
sured simultaneously. Given, for example, the measure- 
ment outcome of the z-componcnt of the electron spin, 
the x-component is completely undetermined, i. e. given 
by a uniform probability distribution. In mathematical 
terms, the existence of such measurements arises through 
the existence of non-commuting operators, and one may 
say that the operators for the z- and the x-component 
are maximally non-commuting, because measurement of 
one observable completely destroys the knowledge of the 
other. Generalized to arbitrary finite-dimensional quan- 
tum systems, this leads to the concept of mutually unbi- 
ased bases, usually abbreviated as MUBs: Two orthonor- 
mal bases of the rf-dimensional Hilbert space H = are 
said to be mutually unbiased, if the absolute value of the 
inner product of any of the basis vectors of the first basis 
and any of the basis vectors of the second basis is given by 
1/Vd. MUBs were introduced by Schwinger as "comple- 
mentary pairs of operators" in order to generate a com- 
plete operator basis in a two-state vector space and an ex- 
plicit construction method was discussed as early as 1960 
Twenty years later, Ivanovic generalized this idea to 
create a complete operator basis of a d-dimensional com- 
plex vector space [2|- The complete measurement (to- 
mography) of an unknown quantum state motivated his 
work. Since a quantum state is described by a density 
operator that can be represented by a hermitian matrix 
with unit trace, the number of real parameters is — 1. 
Every measurement operator can lead to at most d dif- 
ferent outputs, thus there are d — 1 free parameters due 
to normalization. Ivanovic consequently stated, that the 
minimum number of operators to describe an arbitrary 
d-dimensional quantum state is d-\-l. He gave an explicit 
construction method for a "complete set" of these opera- 
tors in prime dimensions, subsequently Wootters coined 
the notion of "mutual unbiased bases" for the different 
complementary bases 0. 

As an example for the application of MUBs, consider 
two observables A and B on whose eigenbases are 
mutually unbiased. Kraus conjectured and Maassen and 



Uffink have shown, that the optimal uncertainty relation 
is given by H{A) -\- H{B) > \nd, where H{A) and H{B) 
denote the von Neumann entropies of A and B, respec- 
tively 0,11. 

For any given dimension d there exists a maximum size 
for any set consisting of pairwise mutually unbiased bases 
which is at most d-\-l @. A set of MUBs of this maximum 
size is called complete. When d is a prime power, i. e. 
d = (J™ for a prime q and m £ N, it is known that the 
maximum size is exactly d+1 and construction methods 
for complete sets of MUBs arc known [1, 0, Q ■ For non- 
primc-powcr dimensions the maximum size is unknown, 
for example in dimension d ~ 6 only the lower bound 3 
is known in addition to the upper bound 7 Q. 

A complete set of cyclic MUBs in dimension d — 2™ is 
a complete set of MUBs, which is fully characterized by a 
single unitary operator U satisfying f/'^^^ = l^j, with 1^ 
denoting the dxd identity operator, such that each of the 
basis vectors of the different bases is obtained from the 
basis vectors of the standard basis by the application of 
powers of U. A complete set of cyclic MUBs can be con- 
sidered as a generalization of the operator that was used 
by Gottesman to cyclically transform the three Pauli op- 
erators . This operator was helpful in security proofs 
of the six-state protocol [111, , so we expect that the 
security of higher dimensional qudit protocols that make 
use of sets of cyclic MUBs can be proven in a similar way. 
Recently, the existence of complete sets of cyclic MUBs 
in even prime power dimensions was proven by Gow [l3l | 
using a representation theoretical argument. Unfortu- 
nately, this method of proof shows merely the existence 
of such MUBs but docs not provide explicit constructions 
for specific values of m. 

In this paper, we present such a construction method. 
It is based on the idea of obtaining a partition of m-qubit 
Pauli operators into maximal commuting sets of orthog- 
onal operators. Starting with a fixed set of commuting 
operators, the residual sets are generated with the help 
of a suitable clement of the Clifford group. By applying 
our method, we obtain complete sets of cyclic MUBs in 
dimensions 2™ for to ~ 1,2,..., 24. 

In section [Hi we start by giving the precise definition 
of a complete set of cyclic MUBs, define an equivalence 
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relation for complete sets of MUBs and introduce the 
necessary preliminaries for this paper, such as Pauli op- 
erators and the Clifford group. We then describe our 
construction method in section [Till and provide complete 
sets of MUBs for m < 24 in section IIVI In section |V] we 
conclude our paper. In the appendices we provide some 
analytical results used in the main part. 
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II. BASIC CONCEPTS 

A. Complete sets of MUBs 

A set of MUBs consists of pairwise mutually unbiased 
bases, which are defined as follows. 

Definition II. 1 (Mutually unbiased bases). 
Two orthonormal bases Bk = {IV'o)' ■ • ■ j IV'd-i)} ^^"^ 
= {l^'o)' • • • ' iV'd-i)} of the d-dimensional Hilbert 
space Ti = are said to be mutually unbiased, if there 
holds 



\{^bM)\^i/Vd 



for all < i, j < d. 



For any given dimension d there exists a maximum size 
N{d) for any set of MUBs, and it is known that N{d) < 
d+1 0. 

Definition II.2 (Complete sets of MUBs). 

In the d-dimensional Hilbert space H ~ C^, a set of 

MUBs of the maximum size N{d) is called complete. 



When is a prime power, i. e. d = p 
m E N, it is known that N(d) ~ d 



' for a prime p and 
1 and construction 

methods for complete sets of MUBs arc known H, 0, Q , 
while for non-prime-power dimensions N{d) is unknown. 

Definition II. 3 (Complete sets of cyclic MUBs). 

In dimension d — 2™ a complete set of cyclic MUBs 
is a complete set of MUBs {Bi, . . . ,Bd+i}, with Bt_ = 
{\0) , . . . ,\d — 1)} denoting the standard basis p7j . 
which is fully characterized by a single unitary opera- 
tor U satisfying U'^'^^ = Id, with 1^ denoting the d x d 
identity operator, as follows: Each of the basis vectors of 
the bases Bk = {\^Po), |V'd-i>} (with 2 < k < d+1) is 
obtained from the basis vectors of Bi by the application 
of powers of U such that \^'^) = U'^''^\i). 



B. Equivalence of MUBs 

Let us assume that we have two complete sets of MUBs 
{Bl, . . . , Bd+i} and {Ai, . . . ,Ad+i} in a Hilbert space 
= of prime power dimension d = q"' . We will 
employ the convention to write the components j of 



the basis vectors 



d-l 

E 

J=0 



(1) 



i.e. for the standard basis Bi, we obtain Bi — Id- The 
two sets of MUBs are equivalent if there exists some fixed 
unitary V taking one set into the other. There are two 
caveats: First, any of the basis vectors is fixed only up to 
an arbitrary global phase. Second, the order of the basis 
vectors of a certain basis is irrelevant as is the order of the 
different bases. Hence, we have the following definition: 

Definition II. 4 (Equivalence of MUBs). 
Two complete sets of MUBs {Bi, . . . ,Bd+i} and 
{Ai, ■ ■ ■ ,Ad+i} are said to be equivalent, if there ex- 
ists a unitary matrix V G MdiC), matrices Wk, k S 
{1, . . . , d + I}, which contain exactly one non-zero entry 
per row and column, the absolute value of which must be 
unity, and a permutation tt on {1, . . . , + 1}, such that 
there holds 

Ak = VB^(k)Wk 
for all values fee {1, . . . , d + 1}. 



C. Pauli operators 

We start with the definition of Pauli operators acting 
on a one-qudit Hilbert space Tiq = C of prime dimension 
q. The Pauli X and Z operators are defined by 



X\i)^\i + l (modg)) 
Z\i)=oj%), 



(3) 
(4) 



where uj = exp(2Tn/q) denotes a complex primitive q- 
th root of unity. It follows that ZX = ojXZ. For any 
vector a = (a^^ja^) = (af , . . . , af^\al, .. ., a^) G F^™, let 
the Pauli operator XZ{d) acting on the m-qudit Hilbert 
space H — TCf'^ of dimension d = g'" be defined by 



X'^iZ'^'i (g) • • • 



. . . (g) t"-^<^m X"^ Z" 



,9 = 2 



XZ(a) , .. - ^ - 

(5) 

so that the eigenvalues of XZ{d) are powers of uj. If we 
represent the one-qubit Pauli operators in the standard 
basis, we obtain the well known Pauli matrices. 



XZ{0\0) 
XZ(l\l) 



1 
1 

-t 

1 



XZ{l\Q) 
XZ{Q\1) 



1 

1 

1 0^ 

-1, 



(6) 
(7) 
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which we will also denote as l2,X,Y and Z. For q>3 
we obtain 

XZ{d) ■ XZ{b) = uj^' <^1XZ{a + h), (8) 

while for q — 2 this expression holds up to powers of i. 
As a consequence, XZ{-) gives rise to a unitary projec- 
tive representation of F^"', which by itself forms a group 
under addition modulo q. We denote the set containing 
all m-fold tensor products of Pauli operators as 

V\^^{XZ{a)\de^^^^}. (9) 

Finally, the symplectic inner product between elements 
a and b of F^™ is defined as 

m 

(a,fe),p = ^af6f-af6,f (mod g). (10) 

1=1 

With the help of the inner product defined above, the 
order of a product of two Pauli operators XZ{a) and 
XZ{b) can be inverted, 

XZ{a) ■ XZ(b) = uj'^^-^^^'-XZ{b) ■ XZ{d). (11) 

It follows that two Pauli operators XZ{d) and XZ{b) 
commute if and only if the symplectic inner product be- 
tween a and b vanishes. 

D. Clifford group operators 

We consider a d = g'" dimensional Hilbcrt space TC of 
m qudits of dimension q. The Clifford group £™ on Ti. is 
defined as the group of unitary operators U which map 
m-qudit Pauli operators onto m-qudit Pauli operators 




= AId{C) unitary | 

(id e F2™)(3a' e F2™)(C/XZ(a)L/^ XZ{ct)}, (12) 

with Md{C) denoting the set oidxd matrices with entries 
in C. 

Any member U of the Clifford group is fully specified 
when the action XZ{d') = UXZ{d)W of ?7 on a gener- 
ating set of elements of the Pauli group T'™ is known. 
In the following we assume that such a generating set 
is given by the operators XZ{xi) and XZ{zi) with Xi ~ 
(0, . . . , 0, 1, 0, . . . 0|0, . . . , 0) e F2™ having a one in posi- 
tion 1 < i < m and = (0, . . . , 0|0, . . . , 0, 1, 0, . . . 0) e 
F^™ having a one in position ■m + l<m + i< 2m. To 
understand this fact, we note that any a e F^™ can be 
expressed as a linear superposition of these generators, 
d = J2i o-i^i + J2i O'i^i- As a consequence, we obtain 

m m 

UXZ{d)U^ = Y[{UXZ{x^)U^)< Y[{UXZ{z^)U^)< 

i=l i=l 

= XZ{d') (13) 



with d' = ^ - af '^i^i- It follows that the mapping 

of a generator g € {xi, . . . , Xm, ^i, . . . , z*™} onto its image 
g' can be described as g''^ = C ■ g^ using a 2m x 2m 
matrix C € Mim^ q) whose first m columns contain the 
transposed row vectors x'.^ and whose second m columns 
contain the transposed i^. In addition, the image d! of 
an arbitrary element a G F^™ can easily be expressed as 
d!^ = C ■ . Since the commutator relations for the 
XZ{xi) and A'Z(z,;), namely 

for all 1 < j,j < m, have to remain unchanged for the 
XZ{x[) and A'Z(z^), the matrix C underlies the con- 
straint 

. j^O™ ^ ^ /0,„ ^^^^^ ^^j.^ 

and is called symplectic. 

If only the matrix C describing the action of a Clifford 
unitary U is known, the matrix U can be reconstructed 
as follows: The first m columns of C contain the trans- 
posed of the images £^ of the generators Xi, while columns 
m -|- 1, . . . , 2m contain the transposed of the images of 
the generators zi (with 1 < i < m). Let us use the cor- 
responding commuting Pauli operators XZ{z[) to define 
the so-called stabilizer state |0)l as the common eigen- 
vector of eigenvalue -f 1, 

XZ{zl)\d)L = +1 • |d)L, for all 1 < i < m. (16) 

We obtain a so-called logical orthonormal basis Bl = 

{|0)i,|i)i,...J2™-i)i}, with t = (ii,...,z„0 e F^ 

and i = *j ' 2™ by applying the operator 

Y[j XZ{ij ■ x'j) onto \0)l- It is easy to verify that 

XZ{z'^)\i)L^u;'^\i)L (17) 
XZix'^)\i)L = |(zi,...,i, + l,...,z™))L, (18) 

which is why the XZ{z'j) and XZ{x'j) are called logical 
Pauli Zj and Xj operators, respectively. Expressed in 
the standard basis, the d x d unitary matrix U = (cjk) 
contains in its k-th column the components of the vector 
|fc)i = J2j Cjk\j) and satisfies U\k) = \k)L- 

III. CONSTRUCTION METHOD 

A. Complete MUBs and maximal commuting 
operator bases 

Let A/rf(C) denote the set of all d x d matrices with 
entries in C. Two matrices A and B from the set Md{C) 
are said to be orthogonal if their trace inner product 
{A, B) ~ tv^A^ B) vanishes. A maximal commuting uni- 
tary operator basis for Mrf(C) is a set M. = {ui, . . . , u^^} 
of unitary matrices containing the identity matrix 1^ that 
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can be partitioned as = {Id} U Ci U • • • U Cd+i into 
d + 1 disjoint sets Cj containing d — 1 commuting oper- 
ators each. The following theorem due to Bandyopad- 
hyay et al. allows the construction of a complete set 
of MUBs in prime power dimensions with the help of a 
maximal commuting unitary operator basis that consists 
of pairwise orthogonal operators only. 

Theorem III.l (Construction of MUBs). 
A maximal commuting unitary operator basis for A/rf(C) 
consisting of pairwise orthogonal operators defines a com- 
plete set ofd+1 MUBs. 

Proof. Each of the sets = {Id} U Cj contains d or- 
thogonal and commuting unitary operators which de- 
fine a common eigenbasis Bj = {I"*/"!), . . . , (unique 
up to phases). Let us denote the elements of Cj as 
= {ujfi,Uj^i, . . . ,Uj^d-i} with Uj^o = Id- Express- 
ing these elements in terms of the eigenbasis Bj leads to 

the diagonal representations Uj^t — "121=1 ^J,t,k\'4'i){4'k\ 
{0 < t < d — 1). Using the orthogonality of the unitaries 
Mj,t, we obtain the equation 



j=o write the components 



vectors ) = ^ 
of the li/jf) in the columns of a matrix B2 
we obtain 



B2 




), and 



(20) 



where we used a special choice of global phases for the 
\tjjf). Setting U = B2, it can be verified that the re- 
maining bases B3, B4 and B5 are given by the matri- 
ces i?3 = U^, B4 = and B^ = t/^ (also note that 
= I4). This means that our example describes a 
complete set of cyclic MUBs in dimension d = 4. Since 
we are interested in the construction of cyclic MUBs for 
q = 2, the question is how such a partition of 7^™ can 
be obtained for arbitrary m. Unfortunately, the method 
for the construction of partitions of 7^™ mentioned in Q 
does not lead to cyclic MUBs in general. 



C. Construction of cyclic MUBs 



dStfiSt'.o = tr(M]^ • Uj'^t') = •^j,t,fcV,t',fc'l(V'il'/'i'>l^ 



k,k' = l 



for < t,t' < d - 1 and 1 < j < j' < d + 1. 
Defining the unitary d x d matrices Alj — {mtk) with 
entries mtk = ^j,t,k/Vd, the above equation can be 



written as M* (g) M,-- 



(1,0,..., 0)^ with vector 



V = (KV^il^i )P, mi;i )p, . . . ,\{m''d)\')- Inversion 
of this vector equation leads to H ~ (1/d, . . . , 1/d) 
and hence shows that the bases Bj and Bj> are mutu- 
ally unbiased. Since this proof applies to all 1 < j < 
j' < d + 1, the set of eigenbases {Bi, . . . , Bd+i} forms a 
complete set of MUBs. □ 



B. Pauli operators and maximal commuting 
operator bases 

As it is discussed in 0, in prime power dimensions 
d = g'" the set 7^™ of Pauli operators can always be 
partitioned as V™ — {IdjUCiU- • - UCd+i in order to form 
a maximal commuting operator basis for d x d matrices. 
Let us give an explicit example for q = 2 and m = 2: 



{l4}UCi 
{14}UC2 
{14}UC3 
{14}UC4 
{14}UC5 



{12®12 
{l2«)l2 
{l2«)l2 
{12012 
{12®12 



Z(8)l2 , l2«'^ , Z(»Z} 

X(g>l2 , l2'S>X , X(g>X} 

Y(g)X , X(g)Z ,-Z(E)Y} (19) 

Y(g)Y , Y(E)l2 , 12<E)Y} 

Y®Z , Z®X -X®Y} 



The common eigenbasis of the operators in {I4} U Ci 
is the standard basis Bx = {|00), |01), |10), |11)} of 
m = 2 qubits, or equivalently the standard basis Bi = 
{|0), |1), |2), |3)} of one qudit of dimension d = 2™. The 
common eigenbasis S2 of {I4} U C2 consists of the basis 



As it can be seen from the example for m = 2 given in 
equation a complete set of cyclic MUBs in dimen- 
sion d = 2™ can be obtained if we find a partition of the 
Pauli operators V™ into d-\-l disjoint sets Cj of size d—1 
containing commuting operators, such that 



Cj+i = UCjU^ 



(21) 



for some unitary U with [7''+^ = l^^. In this case the 
common eigenbases Bj of the operators Cj are simply 
obtained by applying the unitaries U^~^ onto the ele- 
ments of the common eigenbasis Bi of the operators Ci . 
Let us assume now that we always choose Ci to con- 
sist of all c? — 1 tensor products of Z operators, i. e. of 
all Pauli operators XZ{d) such that a — (0|a^) with 
e F'2" \ {0} and d = (0, . . . , 0). In this case the com- 
mon eigenbasis of {Id} U Ci is always the standard basis 
Si = {I0...00) = |0),|0...01) = |l),...,|l...ll) = 
|d — 1)}. As in subsection III B[ we will employ the con- 
vention to write the components of the basis vectors of a 
basis Bk = ■ • ■ , IV'd-i)) the columns of a matrix 

Bk. 

Note that we can store the exponentially many mem- 
bers of Ci in an efficient form by writing {Id} U Ci = 
{XZ{a)\d = c- Ci with c S F™} with the m x 2m genera- 
tor matrix Ci — (Om|lm)- A unitary U which generates 
the remaining sets Cj with j > 2 via (|2ip maps m-qubit 
Pauli operators onto m-qubit Pauli operators and hence 
is a member of the Clifford group. 

Using the representation of a Clifford group unitary 
U in terms of a symplectic matrix C £ M2m{'^2), we 
can reformulate condition (|2ip as follows: Let the set 
{Id} UCj be specified by a m x 2m generator matrix Cj, 
i.e. {ld}UCj = {XZ{a)\a = c- Cj with c G F^"}, then 
the set Cj-|_i has to be specified by the generator matrix 
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Let us summarize the results so far. We are inter- 
ested in finding a partition of the set of Pauli opera- 
tors V™ = {Id} U Ci U • • • U Cd+i into disjoint sets Cj 
of size d — 1 containing commuting operators, such that 
Cj+i = UCjW for a Chfford unitary U with U'^+^ = Id- 
Fixing the first set Ci by choosing the generator matrix 
Ci = (Om|lm) leads to the basis Bi = Id, and the re- 
maining bases are specified by the matrices Bj = U^~^, 
or in other words by the basis U = B2. If in addition 
Ijd+i _ have a complete set of cyclic MUBs 

in dimension d = 2™ which is specified by the powers 
{JJ-' jO < j < d} of a single matrix U. Instead of looking 
for such a. d X d dimensional Clifford unitary U directly, 
it is easier to look for its 2m x 2m dimensional represen- 
tation C e M2m(F2): We have to find a C € A/2m(IF2) 
such that 

I.) C satisfies equation (fT5)) (i.e. C is symplectic), 

II.) the generator matrices Cj = Ci • {C^~^)'^ (with 1 < 
j < d+1 and Ci = (Om|lm)) span non-overlapping 
vector spaces, 

III.) Cd+2 = Ci, or in other words C''+^ = Izm- 

If such a C is found, the last step is to construct the 
unitary U corresponding to C. 



(with l<j<A:<d-|-l and d = 2™) have to span non- 
overlapping vector spaces, or in other words the 2m x 2m 
matrix 



fk-2{B) fk-3{B) 



(25) 



with entries in F2 has to be invcrtiblc; this can be checked 
with the help of lemmas IA.5I and IC.2I of the appendix as 
follows: According to lemma [C?2] a 2m x 2m block ma- 
trix as (j25p is invcrtiblc if and only if the m x m matrix 
/,_2(S) • fk-3{B) - fjMB) ■ fk-2{B) = fu-k\-i{B) e 
Mm(F2) is invertible, where the latter identity is obtained 
by lemma 1X3] Hence, all fj{B) with 1 < j < d — 1 have 
to be invertible. Finally, in order to satisfy condition 
III.), we have to demand that Cd+2 = {fd{B)\fd^i{B)) = 
Ci with d = 2™. This latter condition demands (due to 
the fact that fn-2{x) = fn-i{x)-x+ f„ {x)) that the equa- 
tion fd-i-AB) = fj{B) holds for any j = 1, . . . , 2™"!. 
It is interesting to note that the polynomials fd-i{B) 
and fd-2{B) have simple forms, sec lemmata IA.3I and 
IA.41 e.g. fd-i{B) = B'^^^. Combined with the previous 
conditions, we obtain the following conditions which are 
faster to verify: 

i. ) B = B^, 

ii. ) fj{B) is invertible for all 1 < j < 2'"'\ 



D. Finding a suitable C 



iii.) /2™-i(i?)-/2™-i-l(i3). 



Let us now describe how for every m € N a 2m x 2m 
matrix C with entries in F2 satisfying the three conditions 
I.), II.), and III.) stated at the end of the last subsection 
can be found. We start with the assumption that there 
always exists such a matrix C having the form 



C 



B 1, 

Im 0. 



(22) 



with B g Mjn{^2)- Note that in order for C to satisfy 
condition I.) (being symplectic), B has to be symmetric, 
i. e. B = B^ . Equation ((22|) allows us to write C" as 



UB) U^i{B) 

In-l{B) fn-2{B) 



(23) 



using the recursively defined polynomials /„ over the fi- 
nite field F2 satisfying 



fn{x) fn~lix) ■ X + fn-2ix), 



(24) 



with f-i{x) ~ 0, fo{x) = 1 and fi{x) = x. We prove 
some properties of the /„ we are going to use in the fol- 
lowing in appendix [Al 

Starting with the generator matrix Ci = (Om|lm) 
generating the set {Id} U Ci, our particular choice of 
C leads to the generator list {Ci, C2, . . . , C^+i} with 
C, = Ci • {C^-Y - ifj-2{B)\f,-3{B)). Now in order 
to satisfy condition II.), any two generators Cj and Ck 



1. Construction of U 

So far, we showed that in order to find a symplec- 
tic C for a fixed value of m S N, it suffices to find a 
B e A/m(F2) satisfying the above conditions. Before we 
proceed to explain how we found such matrices B for 
different values of m up to m = 24, let us construct the 
unitary Clifford operator U corresponding to a matrix C 
of the form (|22[) in the way it was explained in subsection 
IIIDI The stabilizer state |0)l is defined as the common 
eigenvector with eigenvalue -1-1 of the logical Pauli Zj op- 
erators, which are now simply given by the usual Pauli 
Xj operators. Hence, 



(26) 



To obtain the | j )l — |(ii, • ■ • , jm))L, we have to apply 
the operator Ha., ^^{x'j^y^ , where the xJ. are given by 




4 = (Bfei, . . . , BkrrASik, . . . , 5„,k) e F^™, 



(27) 



and it follows that 



(1.-4) 

^ E 

FJ'9i=(0,...,0) 



Pj(-l)^-^M), (28) 
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where the phases pj £ {±l,±i} are obtained from B as 
follows: Let b = {Bu, . . . , B„im) G be the diagonal 
of B, let Bk = {Bki, Bkni) G be the fc-th row of 
B, and let v^k = ('^i, • • • , i'A;, 0, . . . , 0) for any vector v — 
{vi,...,Vk,Vk+i,...,Vm). Then, (with exp^(y) = x^) 



Pj = exp, (6 • j) • exp_i (^Y^ jk ■ (Bk ■ j^k) 

k=l 



(29) 



Since U contains the components of the \ j )l as columns, 
we can write it as 



U = H 



®7n 



diag(Po'?'r' 



n)) 



(30) 



where iJ"^™ denotes the m-fold tensor product of the 
Hadamard matrix 



H 



V2V -1 



(31) 



If we assume that our conjecture IB. II is valid, we can 
choose the trace of our cyclic U of order 2™+! to be equal 
to —1 and apply a global phase e"^"^, which is determined 
by 



tr(F«- . diag(pl,p;, . . . ,p;_)), (32) 



where p% denotes the complex conjugate of 7?;^. 



2. Search for B 

Even though the number 2™(™+i)/2 of symmetric ma- 
trices B £ M„i{¥2) seems to be rather large for a com- 
plete search and large m, it turns out that a suitable 
B can quite easily be found for moderate values of to. 
For m > 4, we make the guess that a suitable ma- 



trix B = (bij) exists with entries hi. 
1 ^ *j j ^ with 



a. 



A: 



1 ,ifj-|-z<TO-|-l 
, else, 



for 



(33) 



and aij representing a symmetric 2x2 matrix A = (oy ) 
located in the lower right corner of B. For example, for 
m ~ 5 we assume that B has the form 



/I 1 1 
'ill 



B 



1 ' 

1110 

1 1 an ai2 

Vl ai2 022/ 



(34) 



appears that for a i? of the form of equation (|34p . the 
global phase e^^' of U determined by equations ([5^ and 
does not depend on the small A matrix, but depends 
solely on to: 



„.0 = J^ , for to odd 
I ^ , for TO even, 



(35) 



but we do not have a rigorous proof for general to. Note 
that this implies that the entries of U are roots of unity 
of order 4 for even to and roots of order 8, but not of 
order 4 for odd to. 



3. Equivalence of matrices B 

Given some B satisfying conditions i.), ii.) and iii.), it 
is easy to verify that any matrix B' = PBP^ obtained 
from B by multiplication with a permutation matrix P 
also satisfies these conditions. We are now going to prove 
the following lemma. 

Lemma III. 2 (Equivalent Bs). 

The complete set of cyclic MUBs specified by the matri- 
ces {ld,C/',t/'^...,C/"^} with U' denoting the Clifford 
unitary corresponding to C = ) and B' ~ PBP^ 

for some permutation matrix P is equivalent to the com- 
plete set of cyclic MUBs specified by {1^, U,U^, . . . , W^} 
with U denoting the Clifford unitary corresponding to 

r< — ( B Id \ 



Proof. From 



C" 



P Od 
Orf P 



c 



p^ 



p^ 



(36) 



we obtain the corresponding equation U' — VUV~^ 
with the d = 2™ dimensional Clifford group unitary V 
corresponding to the symplectic matrix ( p ) • Since 
the stabilizer state \0)l of the latter matrix is given by 
|0) = |00. . .0), it follows that V is also a permutation 
matrix. Hence, according to definition III. 41 

U"" = VU'''^''^Wk (37) 

for aU 1 < < d + 1, with n{k) = k and Wk = V-^. □ 

Since there are to! possible permutation matrices, it 
is obvious that we may get up to to! equivalent cyclic 
MUBs with this method. 



IV. RESULTS 



and it remains to search through the 2'^ = 8 possible 
values for the ay. As it is shown in the next section, 
we find indeed solutions for B which are of this form for 
values of to up to 24 (with the only exception that for 
TO = 12, 20 and 21 we had to take a 3 x 3 matrix A). It 



Performing the search for a symplectic matrix C G 
M2m{'^2) defining a Clifford unitary U of dimension 
d = 2™ satisfying the conditions of subsection IIII CI we 
obtained such C's for to = 1,2,..., 24. Each of these C's 
is of the form of equation (|^^ and defines a complete set 
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of cyclic MUBs via the corresponding unitary U given by 
equations ([5D|) and ([55)1 . As a reminder, the search for C 
reduces to a search for a matrix B G Mm{V2) satisfying 
the three conditions of subsection IIII Dl 

i. ) B = B^, 

ii. ) fj{B) is invertible for all 1 < j < 2'"-\ 

iii. ) /2"-i(B)-/2'"-i-l(i3). 

A. The case m — 1 

The matrix i? is a scalar now and fi{B) — B has to 
be equal to fo{B) = 1 which leads to the single solution 
B = 1 and C = ( } o ) ■ The corresponding unitary U is 
given by 



U = iJ •diag(l, 



x/2 



1 -t 
+1 +1 



(38) 



and has the eigenvalues {u!,u!'^} with oj = exp(27ri/3). 
Note that U can also be expressed as 



U 



- cxp(-t7r(A + Y + Z)/(3V3)) , 



(39) 



which is a rotation on the Bloch sphere around the axis 
(1,1,1) with rotation angle 27r/3 that corresponds to the 
operator T used by Gottesman and Lo [l^, [ll|, [l2| . 



leads to I3 + B'^ + B^ + B^ = O3, or using factorization 
modulo 2, {l3 + B + B^)-{l3 + B) = O3. Since in addition 
/2(S) = 13+52 = (l3+B)2 has to be invertible, (I3+B) 
has to be invertible as well. Hence, all valid matrices B 
satisfy 

I3 + B + = O3 and B = B^. (42) 

A computer search reveals that there are m! = 6 such 
matrices, which can be obtained from 



(43) 



via B' = PBP^ by applying all m\ permutation matrices 
P. The unitary U corresponding to C = ( Ji' ) is given 
by 

-l + i 

diag(l, 1, -I, -1, 1, 1, -1) ■ 




U = H 



-1 



f+l +1 -I -I 

+1 -1 -i +2 

+ 1 +1 +1 +t 

+ 1 -1 +1 -I 

+ 1 +1 -I -I 



V2 

-I +1 +1 -1\ 
-I -I +1 +1 
-I +1 -1 +1 

-I -2 -1 -1 
-I -I -1 +1 



(44) 



B. The case m = 2 



+ 1 -1 -I +1 +1 +1 -1 -1 
+ 1 +1 +1 +1 +1 -I +1 -1 

V+1 -1 +1 -I +1 +1 +1 +1/ 

The eigenvalues of U are given by {uj^\k = 1 ,2, 
with u) — exp(27ri/9). According to lemma IIII.21 the 
Clifford unitaries U corresponding to the remaining five 
matrices B generate equivalent sets of MUBs. 
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The 2x2 matrix B has to fulfill the condition that 
/2(B) = 12+5^ equals fi{B) = B which leads to the 
equation I2 + -B + i?^ = O2 having m\ = 2 symmetric 
solutions, which can be obtained via B' ^ PBP^ from 
the matrix 



B 



1 1 
1 



(40) 



by applying all m! permutation matrices P. The unitary 



U corresponding to the matrix C = 

U = H'^ 



I2 02 




is given by 



(41) 



and has the eigenvalues {oj , oj'^ , oj^ , oj'^} with ui 
exp (27rz/5). 



C. The case m = 3 

The 3x3 matrix B has to fulfill the condition that 
UiB) = I3 + B^ + B^ is equal to /3(B) = B^ which 



D. The case m — 4 



The 4x4 matrix B has to fulfill the condition that 



fs{B) = 14 + 5^ + 5*^4 
factorization modulo 2 
satisfy B = B^ and 

54 



B^ equals hiB) = B'^ . Applying 
we find that all valid matrices B 



(I4 



B 



(14 + 5 + 5^ +5^ + 5") = 04. (45) 



It turns out that there are 96 such matrices B, which can 
be grouped into two sets of 48 matrices each: 

The solutions of the first set satisfy I4 + 5 + 5'* = O4 
and B^^ = I4 and can be further divided into two sub- 
sets, one of which is given by the matrices B' = PBP^ 
with P denoting the to! = 24 permutation matrices and 




B = 



and the other one given by the matrices B' 
with 



(46) 



= PBP^ 



B = 



'1 1 1 0\ 

10 

10 1 

vO 1 1/ 



(47) 



8 



m 


4 5 


6 7 


8 9 10 


A 


(8?) (H) 


(H) (8?) 


(?0 (H) (S8) 



m 


11 


12 


13 


14 


15 


16 


17 


A 


(-0 o\ 
lo 0^ 


/ 1 \ 


V 1 / 


(8?) 


I'D o^ 

u o; 


(?0 


(8?) 





m 


18 


19 


20 


21 


22 


23 


24 




I'D 0-) 

U j 




/ 1 \ 


V 1 / 


/ 1 \ 


V 1 / 




I'D 0\ 

u o; 





TABLE I: This table shows a matrix A which corresponds to 
the lower right corner of a matrix B £ Mm{¥2) of the form of 
equation (|34p satisfying conditions i-iii. 



The solutions of the second set satisfy I4 + B + i?^ + 
+ B* = O4 and B^ = I4 and can be further divided 
into two subsets, one of which is given by the to! = 24 
matrices B' = PBP^ and 



B 




(48) 



and the other one given by the ml = 24 matrices B' 
PBP^ with 



B 




(49) 



compute unitaries which generate such MUBs in all di- 
mensions 2™ with m S {1, . . . , 24}, and this limit arises 
only due to limits of computational power. We have rea- 
son to believe that is is possible to prove the existence of 
at least one suitable matrix B as in sections IIIII and IIVI 
for every m g N, which would yield a simple proof for the 
existence of cyclic MUBs in these dimensions, but this is 
not within the scope of this work. 



APPENDIX A: PROPERTIES OF THE 
POLYNOMIALS fk 

In this appendix, we prove some properties of the poly- 
nomials fk over the finite field F2, defined by f-2{x) = 1, 
f-i{x) = and fk{x) = fk-i{x)-x + fk-2{x) for k G Nq. 
By this recursion, it is obvious that fk is a normalized 
polynomial of degree k for k G No. Its coefficients are 
determined in the following lemma. 

Lemma A.l (Coefficients of the polynomial fk)- 

For fc G No there holds fk{x) = X]i=o '3^1'^^ 2;* with 



({k+i)/2\ 
\(k~i)/2) 



0, 



mod 2, 



In other words, fk{x) = Y}r=^ 



if i = k mod 2, 
otherwise. 



k~r\ 



mod 2 



„fc-2r 



E. The cases m > 4 

For TO > 4 we assume that there exists a matrix B 
of the form of equation (pi]) , and we check whether one 
of the eight symmetric 2x2 matrices A leads to a i? 
satisfying conditions i-iii. If for a particular value of m 
no such a is found, we increase the dimension of a and 
search for a suitable 3x3 matrix. In tabic [T] we present 
suitable matrices A for m 4, . . . , 24. According to this 
table for to = 4 for example, a suitable B is given by (pS]) 
and the unitary U corresponding to C = ( J* ) is given 
by 



U = i?®" • diag(l, -1, 1, -I, -t, -1, z, 1, 

~i,l,t,~l,l,i,l,t)-i, (50) 

where we obtained the phases from B with the help 



of equation ([29|) . For values of to > 24 the test whether 
condition ii.) is satisfied for a particular matrix B starts 
to consume a considerable amount of time, preventing us 
from finding suitable matrices B for values of to higher 
than 24. 



V. CONCLUSION 

In this paper, we presented a method to construct com- 
plete sets of cyclic mutually unbiased bases in even prime- 
power dimensions. We used this method to explicitly 



Proof. We have fo{x) = 1 and fi{x) = x, so that the 
statement holds in these cases. The recursion formula 
can be restated as a['^^ = a['^^^ + a-'^"^'. In case i = k 
mod 2, we have to show 



k-\-i ' 

~ \ - 

2 



k+i _ 
2 

k—i 
2 



k+i _ 1 
2 ^ 

k — i 
2 



- 1 



mod 2; 



but this is a standard result from combinatorics and the 
case i^ k mod 2 holds in a similar fashion. □ 

We now want to find a criterion, when there holds 



(fc) ~ (n-"-)! fc! ^ ^ mod 2 for a binomial coefficient. 
For this, let P be the set of prime numbers and denote 
by [x\ maxjn G Z| n < a;} the Gauss' floor function. 

Lemma A. 2 (Factorization of binomial coefficients). 

For any n G N there holds n\ = JlpeP?''^'"'''^ with 
e{n,p) := ["■/p']/ given some k G {0,...,n} there 

holds (l) =ripgpP"'("'''''P) with 

— 'j=i 

Proof. There are [n/p] multiples of p contained in n\ 
(counted once), [n/p-^] multiples of (counted twice) 
etc., which shows the first part. The second part is an 
immediate consequence thereof. □ 
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Since the terms in the curly bracket are either or 1 
for any j, we have (^) = mod 2, if and only if at least 
one term [n/2^] — [{n — fc)/2-'] — [k/2^] is positive. This is 
the case, if and only if (n — k) mod 2-' + k mod 2^ > 2^ 
holds for at least one j € N. We use this fact in the proof 
of the next two lemmata. 

Lemma A.3 (Polynomials /2™-i)- 

// k = 2™ — 1 for some m G N, then fk{x) = x'^ . 

We shall give a direct proof here; another proof may 
be obtained from lemma lA. 71 

Proof. By construction k is odd, and by lemma lA.ll all 
coefficients a,-'^'' = with even i vanish. We have a?'^ — 1 

(k) - ^'+^ - 

and for the remaining odd i, we have to show = [k-ij 

mod 2 = 0. Let us now write = 2^^ • r for odd r and 
e e {1, . . . , m - 2}. We find ^ - ^ = i = 2™ - 1 - 
2^+1 . r = -I mod 2'=+\ thus i mod 2"+^ = 2"+^ - 1 
is the maximally possible value and mod 2*^+^ ^ 0. 
Therefore, i mod 2'=+i + ^ mod 2'=+i > 2'=+i. □ 

Lemma A. 4 (Polynomials /2m -2)- 

For m e N, there holds f2"^-2{x) = X^jli x^'"^'^' . 

Proof. Let k := 2™ — 2. According to lemma \KA\ all a^*^'' 
with odd i vanish. For the even i, we consider and i 
in a similar fashion as in lemma lA.31 We will write these 
numbers in m-bit binary notation, i. e. /c = (1 . . . 10)2 
and i = {ini-iim-2 ■ ■ ■hO)2', we have io = 0, since i is 
even, and we use commata as appropriate. Therefore 
^ = (0, 1 - i,„-i, 1 - hn~2, . . . , 1 - ^2, 1 - ii)2- The 
condition mod2-' +i mod 2^ > 2-' holds, if at the j- 
th position, j £ {1, . . . , m — 2}, there occurs an overflow, 
i.e. if (1 — ij+i) + ij > 1 or ij^i = I A ij = 0. This 
holds for no choice of j, if and only if i is of the form 
(1 ... 10 ... 0)2, i. e. i = 2™ - 2^ for some j. □ 

Lemma A. 5 (Block-determinants of polynomials). 

For the polynomials fk, there holds 

fk{x)fi^i{x) ~ fi{x)fk-i{x) = /|fc-z|-i(a;). 

Proof. Lctu{k,l) -.^ fk{x)fi-i{x)- fi{x)fk-i{x). By the 
recursion fk{x) = fk-i{x)x + fk-2{x) we may write 

fk{x)fi-i{x) = fk-i{x)fi-i{x)x + fk-2{x)fi-i{x) 

and similarly for k and I exchanged. Subtracting these 
terms yields u{k, I) = —u{k — 1,1 — 1). Assuming with- 
out loss of generality k > I, this results in u{k, I) = 
(-l)'w(fc - /,0). Since f-i{x) = and /o(x) = 1, there 
holds w(fc, Ij = (— l)'+-^/fe_;_i(a;), and since we work over 
the field F2, we ignore the prefactor (—1)'+^. □ 

In the following, we will consider divisibility properties 
of the polynomials fk. For this, it is useful to note the 
generahzed recursion = f^fi -|- fk-ifi-i, which can 
be directly read off from eq. (j23p or proven by induction. 



Lemma A. 6 (Divisibility of polynomials). 

// fc' G N divides fc G N, then fk'~i divides fk-i- 

Proof. Let k = nfc' for an appropriate n £ N. We note 
that the case n = 1 is trivial and proceed by induction 
over n. By the generalized recursion, we find that there 

holds /(„_|_i)fe/_i = fnk' + {k'-l) = fnk'fk'-l+fnk'-lfk'-2, 

where fk'-i and fnk'-i are divisible by □ 

Lemma A. 7 (Factorization of fk for odd k). 

There holds f2k+i{x) = fk{xY ' x for k £ Nq. // we set 
k+1 = 2^"' -r for odd r, we have fk{x) ~ fr-i{x)'^ ■x'^ ~^ . 

Proof. By the generalized recursion, we find the relation 

flk+l ~ f{k+l) + k = fk+lfk + fkfk-1 = fk{fk+l + fk-l) 

and use the fact that fk+i{x) -t- fk-i{x) ~ xfk{x). The 
second part follows by induction over e. □ 

Thus, in order to check for invertibility of fk{x) for all 
k e {0, . . . , fcmax} for some A:„iax G (as in condition ii.) 
of the main text), we only have to check invertibility of 
X itself and the fk{x) with even k. If we define polyno- 

mials gk{x) := ^to ^ith - mod 2, we 

have f2k{x) = gk{x'^), and we only have to deal with this 
reduced set of polynomials in . 

APPENDIX B: EIGENVALUES OF MATRICES 
WHICH GENERATE CYCLIC MUBS 

Let us consider a unitary matrix U £ Md{C) which 
generates a complete set of cyclic MUBs. We were not 
able to give a formal proof for the following conjecture, 
but our results indicate that it may be true for all matri- 
ces produced by our method. 

Conjecture B.l (Spectrum of generators of MUBs). 
Let U be a generator of a complete set of cyclic MUBs. 
Then, its spectrum is non- degenerate and consists of all 
roots of unity of order d+1 with precisely one exception. 

By definition, W^^^ = Id, i.e., all eigenvalues of U 
are roots of unity of order d+1, and the second part fol- 
lows immediately from the non-degeneracy. Since we may 
multiply U with an arbitrary power of ui = exp(J^), we 
may choose 1 not to lie in the spectrum. In this case, we 
have trU = — 1 . 



APPENDIX C: RESULTS FROM ALGEBRA 

Let i? be a commutative ring with identity and con- 
sider a matrix A £ Mm{R). We then define the comple- 
mentary matrix oi A as A = (aij)™=i S Mm{R) with 
coefflcients a.y = {—iy~^^detAji, where Aji £ Mm-i{R) 
is constructed from A by removing the j-th row and 
the i-th column. We then have the following criterion 
for invertibility of a matrix; cf. e.g. Hungerford [Tst . 
Prop. VII.3.7 on p. 353, or Bourbaki 0, §8.6, Prop. 12 
on p. III.99. 



10 



Theorem C.l (Cramer's rule). 

Let R be a commutative ring with identity. For every 
matrix A e MmiR), there holds AA = AA = (dct^)lm. 
In particular, A is invertible, if and only if det A is an 
invertible element in R. 

Proof. The main statement follows by direct calculation, 
and we have det A - AeiA^^ = Act{AA^^) = det !,„ = 1, 
if A is invertible. □ 

In this paper, we need only the following lemma. 

Lemma C.2 (Invertible Matrices). 
Let A, B, C, D € M„j(F2) be commuting matrices. Then 
the block matrix ( c' B ) ^ -^2rn (1^2 ) 'is invertible, if and 
only AD- BC e Mr,i{^2) is. 



Proof. Let R be the commutative subring with identity 
generated by the elements A, B, C, D G Mm{^2) in the 
matrix ring M2m(IF2)- Then the statement follows imme- 
diately from Theorem lC.il □ 
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